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(54) AUTONOMOUS RANDOM DYNAMIC CRYPTOGRAM LOCK SYSTEM 



(57) This invention provides an autonomous ran- 
dom dynamic cryptogram lock system which comprises 
a lock body and a key body. There are non- volatile 
memories in both the lock body and key body respec- 
tively and each memory stores a set of cryptogram cor- 
responding. When unlocking the microprocessor in the 
lock body checks the cryptograms. If matching, the lock 



is unlocked, otherwise it gives up alarm. After unlocking, 
the microprocessor renews a set of the corresponding 
real random cryptogram in both memories for unlocking 
next time. It accomplishes one cryptoguard function 
every time. 
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Description 
life** 

Field of the Invention 

[0001] The present invention relates to a cryptogram 
lock system with an automatically variable true random 
code, and more particularly relates to the controller for 
said cryptogram lock system. 

Background of the Invention 

[0002] There are three basic kinds of methods availa- 
ble for existing electronic cryptogram locks to produce 
their code and the like. One method is to input a code by 
user making use of a keyboard. According to this kind of 
method, a user has to remember the code. Thus, the 
security of the cryptogram lock is rather poor if a perma- 
nent code is used, several persons use a cryptogram 
lock, or a person uses several locks. Even if the code is 
changed as a security precaution, the user has to 
relearn a new code each time. In addition, this kind of 
cryptogram lock is not suitable for elderly people, chil- 
dren or person with lower educational lever because the 
operation for opening the lock is considered to be too 
complicated. 

[0003] Another method is that a permanent code is 
selected by the user at the time of purchasing a crypto- 
gram lock and the code is stored in the lock and corre- 
sponding keys. The code stored respectively in the lock 
and keys will be automatically compared when the cryp- 
togram lock is opened. This kind of cryptogram lock pre- 
vents the user from the problem of having to remember 
the code, and therefore is widely applicable in the equip- 
ment including a magnetic card or an IC card. However, 
once the key is lost or reproduced by others without 
authority, the security of the cryptogram lock will be 
threatened seriously. In other hand, if the code needs to 
be revised in this kind of cryptogram lock, one must turn 
to specialist and special devices for help. 
[0004] The third one is based on the second method 
to change the code by means of a certain algorithm. 
According to this method, the code of a cryptogram lock 
will be changed to a new one automatically or by the 
user through a specific operation (for example pushing 
a button) when the cryptogram lock is opened. The 
dynamic code obtained in this way is helpful for improv- 
ing the security of the cryptogram lock. However, it is no 
longer a difficulty nowadays for a person to decipher the 
code by means of a computer because the code is pro- 
duced depending on an algorithm. 
[0005] It is understood, therefor, that the method for 
producing and managing a code has become the key 
point on whether electronic cryptogram locks can be 
popularized to replace the traditional lock and mechani- 
cal cryptogram lock. 



Summary of the Invention 

[0006] The purpose of the present invention is to pro- 
vide a cryptogram lock system with automatically varia- 
5 ble true random codes to overcome the aforementioned 
disadvantages of the prior art. The cryptogram lock sys- 
tem of the present invention may be opened simply in 
the same manner as the conventional lock without the 
necessity for the user to input a code, therefore it 
10 relieves users from the burden for remembering the 
code. In addition, the code stored in the memory units of 
the lock-body as well as the key-body is not a perma- 
nent one, but one automatically changed every time 
after the lock is opened successfully. The code used in 
15 the cryptogram lock of the present invention is a true 
random code. That means there is no any mathematical 
relationship between the previous code and the new 
one, which excludes essentially the possibility of deci- 
phering the code by means of a computer. The only 
20 possible way for deciphering the code is to make a thor- 
ough one-by-one try. As long as the code has enough 
length, however, the possibility of deciphering through 
such a try may be reduced to whatever low level as 
desired. For this reason, the cryptogram lock system 
25 according to the present invention may provide ideal 
safety. 

[0007] The present invention is applicable for various 
cryptogram lock systems in form of either conventional 
lock or remote controlled one. 

30 [0008] The cryptogram lock system with automatically 
variable true random code comprises a lock-body and a 
key-body with a bi-directional communication link estab- 
lished therebetween (either through connecting wire or 
radio set). The lock-body comprises a lock mechanism 

35 portion and a control portion, wherein said control por- 
tion comprises a microprocessor IC1, a non-volatile 
memory unit IC2, a true random code generator IC3, 
and an output driver IC5 for driving said lock mechanism 
portion, and an alarm unit IC6. Said key-body further 

40 comprises a non-volatile memory unit IC4. 

[0009] The cryptogram lock system of the present 
invention operates in the following manner. At first, a 
code is stored respectively in the non-volatile memory 
units IC2 and IC4 of the lock-body and key -body. When 

45 a communication link is established between the lock- 
body and the key-body, the microprocessor IC1 within 
the lock-body takes out the code stored in the memory 
unit IC4 of the key-body and compares it with the code 
stored in the unit IC2 of the lock-body. If the two codes 

so are coincident with each other, the microprocessor con- 
trols the driving mechanism to open the lock, otherwise 
the microprocessor activates the alarm unit to send out 
an alarm signal. Whenever the cryptogram lock is 
opened successfully, the microprocessor IC1 takes out 

55 immediately a new code from the true random code 
generator to replace the previous one stored in the 
memory units IC2 and IC4 so as to make the lock sys- 
tem ready for the next operation. In such a manner, the 
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code used by the lock system can be updated in each 
opening operation. 

[0010] In conclusion, the cryptogram lock system of 
the present invention is characterized in that the code is 
neither inputted through a keyboard nor stored perma- s 
nently in the lock system, but generated by a true ran- 
dom code generator. Whenever the cryptogram lock is 
opened successfully, the microprocessor takes out a 
new code from the true random code generator to 
replace the previous one stored in the memory units of 10 
the lock-body and key-body, respectively. 

Brief Description of the Drawings 

[001 1 ] The invention will be described hereinafter with is 
reference to the accompanying drawings, wherein: 

Fig. 1 is a block diagram showing the function of the 
lock-body and key-body of the cryptogram lock sys- 
tem of the present invention; so 

Fig. 2 is a flow chart showing the operation of the 
cryptogram lock system; 

Fig. 3 is a block diagram showing the principle of 25 
generating the true random code used in the cryp- 
togram lock system; 

Fig. 4 is a flowing chart showing the procedure of 
preparing a new subkey of the cryptogram lock sys- 30 
tern; 

Fig. 5 shows the structure according to the embod- 
iment of the cryptogram lock system; 

35 

Fig. 6 shows the circuit according to the embodi- 
ment of the control portion of the cryptogram lock 
system. 

Fig. 7 (a), (b) and (c) show one example of the 40 
arrangement of the lock-body and the key-body. 

Detail Description of a Preferred Embodiment 

[001 2] Referring to Fig. 1 , the cryptogram lock system 45 
with automatically variable true random code according 
to the present invention conprises a lock-body and a 
key-body with a bi-directional communication link estab- 
lished therebetween. Said communication link may be 
in the form of either wire or radio. The lock-body con- so 
sists of a lock mechanism portion and a control portion. 
The control portion in the lock-body comprises a micro- 
processor IC1, a non-volatile memory unit IC2 and a 
true random code generator IC3. Said control portion 
controls the lock mechanism portion through an output ss 
driver IC5. The control portion also controls an alarm 
unit IC6. In addition, the key-body of the cryptogram 
lock system according to the present invention also has 



a non-volatile memory unit IC4. 
[0013] The code used in the cryptogram lock system 
of the present invention is neither inputted through a 
keyboard nor generated by any algorithm, but produced 
by a true random code generator set in the lock-body. 
Whenever the lock is opened successfully, the micro- 
processor IC1 takes out automatically a new code from 
the true random code generator and stored it simultane- 
ously in the memory units IC2 and IC4, respectively, for 
the next opening operation. 

[0014] The term "true random code" is distinguished 
from pseudo-random code in that, although the latter is 
of stochastic feature in some extent, it follows more or 
less a certain intrinsic rule for generation. Once the rule 
is revealed, it is possible to predetermine the next code 
from the previous one. In this sense, the cryptogram 
lock making use of pseudo-random number is not abso- 
lutely safe. 

[0015] In contrast, the true random code is a series of 
numbers with a completely stochastic feature. The tradi- 
tional method for generating a true random code is to 
select a kind of noise producing an element such as an 
avalanche diode. A circuit is designed to amplify and 
gating the noise produced by the element so as to 
obtain a sequence of pulses with random widths. A 
series of random numbers can be obtained by sampling 
said sequence of the pulses with an independent clock 
pulse of low frequency. Since the pulse widths of said 
sequence of the pulses depend on the noise of the ava- 
lanche effect and various parameters of the circuit (e.g. 
amplifying gain, threshold value, working point, etc.), 
some special technical measures, such as temperature 
compensation, temperature control or designing a cir- 
cuit with stable working point, have to be adopted in 
order to obtain a. random number series with ideal sto- 
chastic feature. This will result in a relatively compli- 
cated and large device unsuitable for forming a single 
integrate chip arranged in a lock-body. 
[0016] Compared with the traditional amplifying-limit- 
ing-sampling method, the solution adopted by the 
present invention for generating the true random code is 
characterized by using an oscillator of random oscillat- 
ing frequency and sampling the output of said oscillator 
by a independent clock pulse series of low frequency. 
[0017] Fig. 3 shows the principle for generating true 
random number according to the present invention. 
Referring to Fig. 3, an independent oscillator A is 
adopted to drive a pseudo-random code (m-sequence) 
generator B. The output of B is converted by a D/A con- 
verter into the levels varying with a pseudo-random rule. 
Said levels are used to control a voltage-controlled 
oscillator (VCO) so as to obtain a spectrum-spreaded 
signal. The frequency of said oscillator A should be 
lower than one fifth of the central frequency of VCO. The 
output signal from the VCO is then sampled by another 
independent pulse series of low frequency (lower than 
one tenth of the lowest frequency of VCO) so as to 
obtain a desired true random code. In order to make 0- 
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1 distributed more evenly in the random numbers, the 
sampled output of VCO is further exclusive-ORed, bit by 
bit, with a sequence of alternating 1 and 0, and the said 
alternating sequence is produced by a D trigger-divider. 
[0018] It is necessary to point out that the low fre- 5 
quency clock for carrying out the last sampling opera- 
tion is a pulse series outputted by the microprocessor 
IC1 when it takes out a new code. The clock with low 
* frequency is not only frequency-independent on the 
oscillating source, but also completely random in the io 
time point of taking out the code. 
[001 9] According to the aforementioned principle, the 
circuits for generating true random numbers are suitable 
for forming a single integrate chip applicable for various 
small devices. is 
[0020] The operation of the cryptogram lock system of 
the present invention will be described with reference to 
Fig. 2. At first, a communication link is established 
between the lock-body and the key-body At this time, 
the microprocessor IC1 takes code A and code B 20 
respectively from the memory unit IC2 within the lock- 
body and memory unit IC4 within the key and compares 
them with each other. If said two codes are coincident 
with each other, the microprocessor IC1 controls the 
driver IC5 to open the lock, then takes a new code from 25 
the true random code generator IC3 and stores it 
respectively in units IC2 and IC4. If the code A and B 
are not coincident, IC1 controls the alarm unit to send 
out an alarm signal. In this manner, it is possible to real- 
ize the management of random codes in a system con- 30 
sisting of one lock with multiple keys or multiple locks 
with one key. More particularly, codes are stored in dif- 
ferent locations of the two memory units according to 
the series number of key and lock. For different keys of 
the same lock or different locks with the same key, the 35 
codes are not only different and random, but also inde- 
pendent from each other. When opening a lock, the 
codes are searched and checked according to the 
series number of the lock and key. According to this 
solution, only one key is necessary for a user to open 40 
locks that he is authorized to opened. This deletes not 
only the necessity for one to carry a lot of keys, but also 
provides conveniences for optionally arranging the 
authority of opening locks. For example, a waiter of a 
hotel may use one key to open the door of each room 45 
maintained by him, but is incapable of opening other 
locks in a room. A guest may use one key to open all of 
the locks in his own room, but may not open door of 
another room. 

[0021] Another important feature of the cryptogram so 
lock system according to the present invention is to pro- 
vide three different kinds of key-bodies. The key-body 
may be a parent key, a subkey and/or a black key, which 
have different functions and are distinguished from each 
other by their function codes. The called "subkey" is the 55 
key for opening a cryptogram lock. There may be multi- 
ple subkeys prepared for one cryptogram lock. The 
called "parent key" is specif ically designed for preparing 



subkeys under authorization. The black key is used spe- 
cifically for canceling the authorization of any subkeys. 
When purchasing a cryptogram lock of the present 
invention, the customer can select rationally a user code 
and store it into the memory unit of the parent key, black 
key and the lock-body. Whenever a new subkey is 
needed to be prepared, the user should firstly establish 
a communication link between the parent key and lock- 
body, and check the user code. If the result is correct, a 
random code will be stored simultaneously into the 
memory unit of a subkey and the lock-body by the 
microprocessor within a lock-body through the commu- 
nication link established between the subkey and lock- 
body, which makes the subkey authorized. When it is 
necessary to cancel the authorization of a subkey, a 
communication link should be established at first 
between the black key and lock-body to check the user 
code. If the result is correct, the random code corre- 
sponding to the particular subkey will be erased by the 
microprocessor through the communication link 
between the lock-body and subkey, which makes the 
subkey unauthorized. If it is necessary to cancel all of 
the previously authorized subkeys, such as in case one 
of subkey is lost, the user can establish at first the com- 
munication link between the parent key and lock-body to 
check his user code, then set the communication 
between the black key and lock-body to check the user 
code again, and finally delete all of the random codes 
stored in the memory unit by the microprocessor. After 
the accomplishment of "clear up", a number of new sub- 
keys may be reproduced simply by following the proce- 
dure aforementioned for preparing a new subkey. Those 
operations are shown in Fig. 4. 
[0022] Since all of those operations are as simple as 
the operation for opening the cryptogram lock without 
the necessity of utilizing any specific equipment and 
special technique, it is quite easy to be performed by 
users. 

[0023] When selecting the user code during the time 
of purchasing, the microprocessor will automatically 
divide the code into two segments A and B and store 
both of them into the memory unit of the lock-body, 
wherein the segment A is used as the address point of 
the segment B. In the memory unit of the parent key and 
black key, segment B is stored only in the address indi- 
cated by segment A, and the remainder portion of the 
memory unit is filled with useless code. For this reason, 
the user code cannot be known by others even if the 
parent key or black key is lost. In addition, it is also 
impossible for the manufacturer or salesman to know 
the user code of the sold cryptogram lock In normal 
times, the parent key and black key will not be used and 
therefore should be kept appropriately In case the par- 
ent key or black key is lost, the user may take out the 
user code recorded secretly by him and go to any serv- 
ice station to reproduce a parent key or black key with- 
out the necessity of bringing the lock-body together with 
him. 
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[0024] In addition, the microprocessor within the lock- 
body may not only be connected with the output driver 
to control the opening of the lock, but also has alarming 
input and output ports. Said input port is designed for 
receiving various alarm signals produced from outside 5 
sources, such as signal of illegal opening door, smoke 
alarming signal, etc. The output port is for sending out 
various signals concerning the opening of the crypto- 
gram lock, such as the series number of lock, the series 
number of the key which is used right now to open the w 
lock, alarming signal, etc. Those signals may be sent to 
a monitoring center through a network to form a central- 
ized safety system. 

[0025] A practical example will be described hereinaf- 
ter to explain the present invention in more detail. It is 75 
understood that the example is only to demonstrate the 
invention rather than limit the scope of the invention. 

Example 

20 

[0026] As shown in Fig. 5, the cryptogram lock of this 
example can be operated in an ordinary way by insert- 
ing a key into the lock. The communication between the 
lock-body and key-body is established through conduct- 
ing wires. There are two key-holes designed respec- 25 
tively on the opposing sides of the lock-body. Contact 
points or holes are formed respectively within the key- 
holes as well as on the remote end of the key. When the 
lock is opened, a subkey should be inserted into the 
front key-hole. When a new subkey is prepared, a user 30 
should insert the parent key into the rear key-hole and 
the subkey to be prepared into the front key-hole. When 
canceling a subkey, the user should insert the black key 
into the rear key-hole and the subkey to be canceled 
into the front key-hole. In case all of the subkeys need to 35 
be canceled, one should insert the parent key into the 
rear key-hole and the black key into the front key-hole. 
[0027] The circuit adopted by this example is shown in 
Fig. 6. In this circuit, the microprocessor is formed by 
AT89C2051 , the memory unit of key and lock-body is 40 
AT24C04, the true random code generator consists of 
five integrate chips, namely 4015, MAX500, 4070, 4067 
and 4013. 

[0028] The P1 .6 (pin 18) of the microprocessor is con- 
nected respectively with the data wire SDA (pin 5) and 45 
clock pulse wire SCL (pin 6) of the memory unit of the 
lock-body for reading and writing the code. When the 
subkey/black key is inserted into the front key-hole, the 
P1.4 (pin 16) and P1.5 (pin 17) of the microprocessor 
are connected respectively with the data wire SDA (pin so 
5) and clock pulse wire SCL (pin 6) of the memory unit 
of the subkey/black key for reading and writing the code. 
When the parent key is inserted into the rear key-hole, 
the P1.2 (pin 14) and P1.3 (pin 15) of the microproces- 
sor are connected respectively with the data wire SDA 55 
(pin 5) and clock pulse wire SCL (pin 6) of the memory 
unit of the parent key for reading and writing the code. 
When the code is verified, a controlling signal will be 



sent out from the P1.3 (pin 13) of the microprocessor for 
driving the lock opening mechanism and then close it 
after predetermined time. The P1. 0(pin 12) is used to 
send a alarm signal when the verified result is false. The 
RXD (pin 2) of the microprocessor is used for receiving 
external alarm signals, its TXD (pin 3) is for output alarm 
signal (such as the series number of lock or key). The 
true random code generator of this embodiment has, in 
comparison with that shown in Fig. 3, a oscillator A con- 
sisting of two exclusive-OR gates, a m-sequence gener- 
ator consisting of a 7 bit shift-register (with X 7 + X 6 
feedback), a D/A converter consisting of MAX500, VCO 
making use of the local oscillation of the phase locked- 
loop 4046, and two D triggers consisting of 4013. The 
clock pulse for taking out random code is outputted from 
the pin 8 (T 0 )of the microprocessor, and the random 
code is inputted into the microprocessor through pin 6 
(INTO). 

[0029] While the present invention has been particu- 
larly described with reference to the aforementioned 
preferred embodiment, it would be understood by those 
skilled in the art that various changes in form and detail 
may be made within the scope of the invention. Since 
the I/O arrangement of a microprocessor is rather flexi- 
ble, it is possible to adjust the arrangement according to 
the necessity and habit of designer. The various inte- 
grated elements used in the aforementioned embodi- 
ment may also be replaced by other elements with the 
similar function. In addition, it is worth pointing out that 
some well-known elements as well as their connection 
are omitted from Fig. 6 for simplicity, which can be 
checked easily with reference to handbooks in the art. 
[0030] The length of the user code used in the afore- 
mentioned embodiment is 6 bytes (2 bytes for segment 
A and 4 bytes for segment B). The random code for 
opening the lock is 3 bits. The sequence number of the 
lock is 2 bytes, and the sequence number of the key is 1 
bytes. Fig. 7 shows one example of the arrangement of 
the lock-body and the key-body, however, it is not the 
only possible way for realizing the invention. 

Claims 

1. A cryptogram lock system comprising a lock-body 
and a key-body with a bi-directional communication 
link established therebetween, wherein: 

said lock-body comprises a lock mechanism 
portion and a control portion which is com- 
posed of a microprocessor IC1, a non-volatile 
memory unit IC2 and a true random code gen- 
erator IC3 and controls the operation of the 
lock mechanism portion through a output driver 
IC4; and 

said key-body comprises a non-volatile mem- 
ory unit IC4. 

2. The cryptogram lock system according to claim 1 , 
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wherein the key-body comprises a subkey to open 
the lock-body for users. 

3. The cryptogram lock system according to claim 1 , 
wherein the key-body comprises a parent key to s 
prepare new subkeys under authorization. 

4. The cryptogram lock system according to claim 1 , 
wherein the key-body comprises a black key to can- 
cel the authorization of a subkey or all subkeys. 10 

5. The cryptogram lock system according to claim 1 , 
wherein 

said true random processor IC3 comprises an is 
oscillator, an m-sequence generator, a D/A 
converter, a voltage-controlled oscillator, and a 
low frequency pulse generator, wherein 
said oscillator is used to drive said m-sequence 
generator to generate a sequence code, said 20 
D/A converter converts the sequence code into 
level varying according to a pseudo-random 
rule, said voltage-controlled oscillator produces 
a varying spread-spectrum signal under the 
control of said level, and said low frequency 25 
pulse generator samples the spread-spectrum 
signal to said low frequency pulse generator 
samples the spread-spectrum signal to pro- 
duce said true random code. 
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